AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 

application: 

1. (Canceled) 

2. (Currently Amended) An arithmetic apparatus incorporated in a LSI for 
performing a long integer product-sum arithmetic operation, the arithmetic apparatus 
comprising: 

an arithmetic unit comprising: 

an integer based un i t ar i thmotic multiplier circuit; 

a finite field GF(2"')-based GP^g*" ) baood un i t ar i thmot i c multiplier circuit 
logically adjacent to but separated from said integer based unit ar i thmot i c multiplier 
circuit; [[and]] 

an adder circuit shared bv the separated integer based multiplier circuit 
and the finite field GF(2"'Vbased circuit and configured to operate on data from either 
the integer based multiplier circuit or the finite field GF(2'^)-based circuit: and 

a selector configured to select one of said integer un i t arithmot i c multiplier 
circuit and said finite field GF(2"")-based 0^(2"" ) baood un i t arithmotic multiplier circuit, 
and 

a controller controlling said selector to make said selection. 



3. (Previously Presented) An apparatus according to claim 2, wherein the 
arithmetic unit further comprises: 

an adder circuit which has a buffer for storing interim result data, adds the interim 
result data to result data from one of said integer unit arithmetic circuit and said finite 
field GF(2"') based unit arithmetic circuit which is selected by said selector, propagates 
a carry in an integer based unit arithmetic operation, and propagates no carry in a finite 
field GF(2"^) based unit arithmetic operation. 

4. (Previously Presented) An apparatus according to claim 3, wherein the 
arithmetic unit further comprises: 

a carry holder for storing a carry obtained in a previous operation cycle, and an 
output-stage adder circuit configured to add the carry in said carry holder to an output 
from said adder circuit, output an upper bit of an addition result as an updated carry to 
said carry holder, and output a lower bit of the addition result as operation result data. 

5. (Previously Presented) A crypto processing apparatus for selectively 
encrypting or decrypting based on an integer based operation by said arithmetic 
apparatus defined in claim 2, and encrypting or decrypting based on a finite field GF(2'^) 
based unit arithmetic operation by said arithmetic apparatus. 

6. (Currently Amended) An arithmetic apparatus incorporated in a LSI, 
comprising: 



an arithmetic unit including an integer unit arithmetic circuit, wherein the 
arithmetic circuit comprises a full adder, the full adder includi ng a carry propagation 
section configured to prooaoate a carry of an operation resul t of the full adder upon 
reception of a selection signal corresponding to an inteaer-based unit arithmetic 
operation and to not propagate the carry of the full adder upo n reception of a selection 
signal corresponding to a finite field GFf2"'Vbased unit arithme tic operation: and 

a controller configured to output, to said integer unit arithmetic circuit, a selection 
signal for selecting one of an integer unit arithmetic operation and finite field 
GF(2"')-based GF(2" ) bas e d unit arithmetic operation^and 

a carry propagation oontroi l or conf i gurod to propagato, whon a l ong product sum 
o poration is to bo oxocutod, a carry of an oporat i on rooult obta i nod by oa i d i nteger 
b asod unit arithmotic c i rcuit upon rocopt i on of a ooloction oigna l corrocponding to an 
m togor basod unit ar i thmot i c oporation, and propagato no carry of tho op o rat i on resu l t 
^on rocopt i on of a so l oction oigna l corrocpond i ng to a finite f i old GF(2' " ) bacod unit 
a fithmot i o oporat i on, 

wherein an integer-based i ntog o r bas e d multiply operation [[and]] ora finite field 
GFf2'^Vbased GF^ ") basod multiply operation is switch e d selected by controlling the 
carry propagation. 

7. (Original) An apparatus according to claim 6, wherein said integer unit 
arithmetic circuit comprises a full adder (FA), and said carry propagation controller 
comprises a switch to which the selection signal and a carry out signal are input, and 
Performs carry propagation control of said full adder in units of bits. 
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8. (Original) An apparatus according to claim 6, wherein said integer unit 
arithmetic circuit comprises a fuller adder, and said carry propagation controller 
comprises a selection section configured to switch between outputting a 2-input EX-OR 
result obtained by said full adder in units of bits and outputting an EX-OR result based 
on the result and an input carry as an addition result. 

9. (Previously Presented) An apparatus according to claim 6, wherein said 
integer based unit arithmetic circuit adds by propagating a carry when executing the 
integer based multiply operation, and adds without propagating any carry when 
executing the finite field GF(2"') based multiply operation. 

10. (Previously Presented) A crypto processing apparatus for selectively 
encrypting or decrypting based on an integer based operation by said arithmetic 
apparatus defined in claim 6, and encrypting or decrypting based on a finite field GF(2'") 
based arithmetic operation by said arithmetic apparatus. 

11. (Currently Amended) An arithmetic apparatus for lone product-sum 
o peration incorporated in a LSI, comprising: 

an arithmetic unit module including an integer unit arithmetic circuit a-ten^ 
Pf oduot cum operat i on c i rcu i t wh i ch e xecut e s only po l ynom i a l mu l t i p l ication w i th a fin i t e 
field-XSefg" *) hnnnd po l ynom i a l baso oxor e ss i on configured to perform one of an integer 
unit arithmetic operation and a finite field GF(2"^Vbased unit arithmetic operation : and 
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a controller module configured to divide the processing of modular multiplication 
of the integer unit arithmetic operation and the finite fie ld GF(2"^Vbased unit arithmetic 
operation into polynomial multiply processing and [[a]] modulo processing and to cause 
s a i d long product cum operat i on c i rcu i t the intecer un it arithmetic circuit to execute the 
polynomial multip li cation, multiply processing: 

wherein the controller module selects the one of an inte ger unit arithmetic 
operation and finite field GF(2'^Vbased unit arithmetic operation and executes the 
modulo processing on the integer unit arithme tic circuit. 

12. (Previously Presented) An apparatus according to claim 1 1 , wherein said 
long product-sum operation circuit comprises a single precision multiplier circuit 
configured to multiply polynomial data of the finite field GF(2'") based polynomial base 
Without propagating any carry, and a double precision adder circuit configured to add 
Using a multiply result obtained by said multiplier circuit, and said controller controls said 
multiplier circuit and said adder circuit in the multiply processing. 

13. (Previously Presented) An apparatus according to claim 12, wherein said 
controller module comprises a quotient acquisition circuit configured to set, in the 
rnodulo, a multiply result of two polynomial data as first dividend polynomial data, set 
predetermined modulo polynomial data as divisor polynomial data, calculate a quotient 
on the basis of the first or subsequent dividend polynomial data and the divisor 
Polynomial data, and acquire 1 -block quotient polynomial data with the number of bits 
Corresponding to a bus width from an upper order, and 
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when 1 -block quotient polynomial data is acquired in the modulo, said multiplier 
circuit and said adder circuit calculate next dividend polynomial data by subtracting a 
multiply result of the 1 -block quotient polynomial data and the divisor polynomial data 
from current dividend polynomial data, and said controller module controls said quotient 
acquisition circuit to repeat processing up to calculation of the dividend polynomial data, 
to obtain residue data. 

14. (Original) An apparatus according to claim 13, wherein in the quotient 
calculation, said quotient acquisition circuit multiplies inverse data of upper two blocks 
of the divisor polynomial data and upper two blocks of current dividend polynomial data, 
and sets a second upper block of the multiply result as the 1 -block quotient polynomial 
data. 

15. (Original) An apparatus according to claim 14, wherein said quotient 
acquisition circuit calculates inverse data from upper two blocks of the divisor 
polynomial data and stores the data in a memory when acquiring quotient polynomial 
data in a first operation, and reads out inverse data from said memory when acquiring 
quotient polynomial data in second and subsequent operations. 

16. (Original) An apparatus according to claim 14, wherein in calculating the 
inverse data, said quotient acquisition circuit counts the number of consecutive Os from 
an upper order of upper two blocks of the divisor polynomial data, extracts polynomial 
data of one block + 1 bit from an upper order such that a most significant bit is set to 1 , 
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obtains an inverse of the extracted polynomial data, obtains 2-block data as a whole by 
concatenating 1 -block corrected data whose least significant bit is 1 and other bits are 0 
to a most significant bit of the obtained inverse, and setting, as the inverse data, a result 
obtained by bit-shifting the data toward an upper order side by the count of Os. 

17. (Previously Presented) A crypto processing apparatus for encrypting or 
decrypting based on a finite field GF(2"') based modular multiplication by said arithmetic 
apparatus defined in claim 1 1 . 

18. (Previously Presented) An apparatus according to claim 1 1 , wherein said 
product-sum operation circuit includes a unit arithmetic circuit, operates said unit 
arithmetic circuit by propagating a carry when executing an integer based unit arithmetic 
operation, and operates said unit arithmetic circuit without propagating any carry when 
executing a finite field GF(2'") based unit arithmetic operation. 

19. (Previously Presented) An arithmetic apparatus comprising: 

an arithmetic unit including a long product-sum operation circuit which executes a 
rnodular multiplication with a finite field GF(2"') based polynomial base expression; and 

a controller configured to divide the modular multiplication into multiply 
processing and a modulo and causing said long product-sum operation circuit to 
execute the modular multiplication, 

wherein said long product-sum operation circuit comprises a single precision 
rnultiplier circuit configured to multiply polynomial data of the finite field GF(2'") based 
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polynomial base without propagating any carry, and a double precision adder circuit 
configured to add using a multiply result obtained by said multiplier circuit, and said 
Controller controls said multiplier circuit and said adder circuit in the multiply processing, 

said controller comprising a quotient acquisition circuit configured to set, in the 
modulo, a multiply result of two polynomial data as first dividend polynomial data, set 
predetermined modulo polynomial data as divisor polynomial data, calculate a quotient 
on the basis of the first or subsequent dividend polynomial data and the divisor 
Polynomial data, and acquire 1 -block quotient polynomial data with the number of bits 
Corresponding to a bus width from an upper order; and when 1 -block quotient 
Polynomial data is acquired in the modulo, said multiplier circuit and said adder circuit 
calculate next dividend polynomial data by subtracting a multiply result of the 1 -block 
quotient polynomial data and the divisor polynomial data from current dividend 
Polynomial data, and said controller controls said quotient acquisition circuit to repeat 
processing up to calculation of the dividend polynomial data, thereby obtaining residue 
data, 

wherein in the quotient calculation, said quotient acquisition circuit multiplies 
inverse data of upper two blocks of the divisor polynomial data and upper two blocks of 
current dividend polynomial data, and sets a second upper block of the multiply result 
as the 1 -block quotient polynomial data, and 

wherein in calculating the inverse data, said quotient acquisition circuit counts the 
number of consecutive Os from an upper order of upper two blocks of the divisor 
polynomial data, extracts polynomial data of one block + 1 bit from an upper order such 
that a most significant bit is set to 1 , obtains an inverse of the extracted polynomial data. 
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obtains 2-block data as a whole by concatenating 1-bloci< corrected data whose least 
significant bit is 1 and other bits are 0 to a most significant bit of the obtained inverse, 
and setting, as the inverse data, a result obtained by bit-shifting the data toward an 
upper order side by the count of Os. 
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